Personal Data Protection Policy Statement
Capital Futures Financial Group is committed to implementing personal data protection and management measures, adhering to the requirements outlined in the Personal Data Protection Act and safeguarding the rights of personal data subjects. We aim to minimize the impact of any potential breaches of personal data files and continue to operate and improve our personal data management system. This statement is issued to reflect our commitment.
- Comply with national regulations related to personal data protection.
- The company will collect personal data only for specific, legitimate, and reasonable purposes, and only within the scope that is truly necessary.
- Collect the minimum necessary personal data for legitimate, specific purposes and will not process excessive personal data.
- The group will clearly inform data subjects about how their personal data will be used and by whom.
- Collected customer data will be processed appropriately and relevantly.
- Handle personal data fairly and lawfully.
- Maintain a list of categories of personal data processed by the company.
- Ensure the accuracy of personal data and update it when necessary.
- Collected personal data will be stored in accordance with the law or for specific, legitimate, and reasonable purposes.
- Respect the rights of data subjects regarding their personal data, including the rights to access or request to view, request copies, request supplementation or correction, request to cease collection, processing, or use, and request deletion.
- Protect the collected, processed, and used personal data files with appropriate security technology to ensure the safety of all personal data.
- Personal data will only be transmitted internationally when adequate protection measures are in place.
- Ensure appropriateness and legality when personal data is used in exceptions permitted by the Personal Data Protection Act.
- Establish and implement a personal data management system, and maintain it continuously to enforce the personal data protection policy and ensure the safety of personal data files.
- Identify internal and external stakeholders and their involvement in the governance and operation of the personal data management system.
- Clearly define employee responsibilities and obligations in the operation of the personal data management system.
- Plan emergency response procedures to handle incidents such as theft, alteration, damage, loss, or leakage of personal data.
- Properly supervise entrusted agencies when collecting, processing, and using personal data.
- Set up contact points for data subjects to exercise their rights regarding personal data or to submit related complaints and inquiries.
The issuance of this statement clearly declares the importance of personal data management. All employees should thoroughly understand the contents of this statement to safeguard the security and sustainability of all personal data files within the company.
